Cisco Advanced Malware Protection For Endpoints vulnerabilities

12 CVEs affecting Cisco Advanced Malware Protection For Endpoints, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1386, published 2021-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0397, published 2018-08-01. Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in Cisco AMP for Endpoints Mac Connector Software installed on Apple macOS 10.12 could allow an unauthenticated, remote attacker to cause a kernel panic on an affected system,…
CVE-2018-0237, published 2018-04-19. Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS Connector could allow an unauthenticated, remote attacker to bypass malware…
CVE-2018-15437, published 2018-11-08. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the…
CVE-2020-3314, published 2020-05-22. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP…
CVE-2017-12312, published 2017-11-16. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a…
CVE-2021-1280, published 2021-01-20. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection (AMP) for Endpoints for Windows and Immunet for Windows could allow an authenticated, local attacker to…
CVE-2018-15452, published 2018-11-13. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for Endpoints on Windows could allow an authenticated, local attacker to disable system scanning services or…
CVE-2020-3344, published 2020-05-22. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an…
CVE-2020-3343, published 2020-05-22. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an…
CVE-2021-1386, published 2021-04-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an…

Latest

CVE-2020-3350, published 2020-06-18. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the…
CVE-2019-1932, published 2019-07-06. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The…